CVE-2017-1319: IBM Tivoli Federated Identity Manager 6.2 is affected by a vulnerability due to a missing secure attribute...

Security readout for executives and security teams

IBM Tivoli Federated Identity Manager 6.2 releases have a session cookie weakness: an SSL session cookie may lack the Secure attribute. For identity systems, that matters because cookies are tied to authenticated sessions. The public bundle does not provide CVSS, exploit evidence, or detailed remediation text. Exposure is most relevant where affected TFIM versions remain deployed, especially internet-facing or partner-facing federation services. Internal-only deployments still matter because identity infrastructure often has broad trust relationships. Prioritize inventory and remediation for any live TFIM 6.2.x environment because this is identity infrastructure. Urgency increases if the service is internet-facing or supports external partners. Mitigation focus: Identify all Tivoli Federated Identity Manager 6.2.x deployments.; Review IBM advisory swg22002871 for official fixes or workarounds.; Apply the relevant IBM fix pack or vendor-recommended remediation..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.